"IBM researchers have found that it is possible for third party
applications to inject JavaScript code into instances of the Android
browser. According to a paper published by the researchers, the
vulnerability exists in Android 2.3.4 and 3.1 and is believed to exist
in earlier versions.

"IBM researchers have found that it is possible for third party
applications to inject JavaScript code into instances of the Android
browser. According to a paper published by the researchers, the
vulnerability exists in Android 2.3.4 and 3.1 and is believed to exist
in earlier versions.

Apple released an update for iOS devices that addresses a major
vulnerability with insecure SSL/TLS connections and x509 certificate
handling. Programs currently exist in the wild that can easily hijack a
purportedly "secure" connection from an afflicted device.